Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Using Scapy 2.4.0 Can Cause Your System to Freeze

CVE-2019-1010142 · published 7 years ago
Summary

Using Scapy 2.4.0 can cause your system to freeze and become unresponsive. This can happen when certain types of data are sent to it, either over a network or by loading a pre-recorded network capture. To avoid this issue, update to a newer version of Scapy.

What to do
  • Update philippe biondi scapy to version 2.4.1.
Affected software
Ecosystem VendorProductAffected versions
pip philippe biondi scapy >= 2.4-rc1, < 2.4.1
Fix: upgrade to 2.4.1
– scapy scapy 2.4.0
cpe:2.3:a:scapy:scapy:2.4.0:*:*:*:*:*:*:*
– fedoraproject fedora 29
30
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
Original advisory text
scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack...
scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Type
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')
Timeline
Published19 Jul 2019
Updated31 Oct 2026
First seen6 Mar 2026
Sources
GHSA-mpf2-q34c-fc6j · GHSA
CVE-2019-1010142 · NVD
Track software like this
Free during beta